pietjans1

Ik heb nu geen tijd meer om het te testen, maar morgen ga ik het proberen. Als probleem is opgelost gaat de vlag uit. Met vriendelijke groet, Piet Jansen

Beste mensen, U moet wel geduld met mij hebben, maar ik hoop dat hetonderstaande logje het goede is. Wacht de reactie weer af. Met vriendelijke groet, Piet Jansen ComboFix 12-06-10.01 - Piet 11-06-2012 13:13:12.4.1 - x86 Microsoft Windows 7 Professional 6.1.7601.1.1252.31.1043.18.959.282 [GMT 2:00] Gestart vanuit: c:\users\Piet\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\Piet\Desktop\CFScript.txt AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6} SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((( Bestanden Gemaakt van 2012-05-11 to 2012-06-11 )))))))))))))))))))))))))))))) . . 2012-06-11 11:31 . 2012-06-11 11:31 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-06-11 09:48 . 2012-05-08 16:40 6737808 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C25EF93F-EEEB-4648-95A2-E6ACE43D84CC}\mpengine.dll 2012-06-10 13:24 . 2012-06-10 13:24 5322 ----a-w- c:\windows\system32\PerfStringBackup.TMP 2012-06-09 21:16 . 2012-05-08 16:40 6737808 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2012-06-08 20:40 . 2012-06-08 20:40 -------- d-----w- c:\program files\Common Files\Nokia 2012-06-08 20:39 . 2012-04-22 11:51 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2012-06-08 20:38 . 2012-06-08 20:38 -------- d-----w- c:\program files\PC Connectivity Solution 2012-06-07 13:16 . 2012-06-07 13:16 -------- d-----w- c:\users\Piet\AppData\Roaming\Malwarebytes 2012-06-07 13:16 . 2012-06-07 13:16 -------- d-----w- c:\programdata\Malwarebytes 2012-06-07 13:16 . 2012-06-07 13:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-06-07 13:16 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-06-02 11:52 . 2012-06-02 11:52 388096 ----a-r- c:\users\Piet\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-06-02 11:52 . 2012-06-02 11:52 -------- d-----w- c:\program files\Trend Micro 2012-05-17 18:31 . 2012-05-17 18:31 -------- d-----w- c:\users\Piet\AppData\Local\NokiaAccount 2012-05-17 17:50 . 2012-06-08 22:32 -------- d-----w- c:\users\Piet\AppData\Roaming\Nokia Suite 2012-05-17 17:50 . 2012-06-08 22:32 -------- d-----w- c:\users\Piet\AppData\Roaming\Nokia 2012-05-16 13:07 . 2012-05-16 13:07 -------- d-----w- c:\programdata\PC Suite 2012-05-16 13:07 . 2012-05-17 17:43 -------- d-----w- c:\users\Piet\AppData\Roaming\PC Suite 2012-05-16 13:04 . 2012-06-08 20:42 -------- d-----w- c:\programdata\Nokia 2012-05-16 13:03 . 2012-05-16 13:03 -------- d-----w- c:\program files\DIFX 2012-05-16 13:02 . 2012-01-09 15:28 75264 ----a-w- c:\windows\system32\nmwcdcls.dll 2012-05-16 12:59 . 2012-06-08 20:40 -------- d-----w- c:\program files\Nokia . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-05-05 12:50 . 2012-04-18 10:15 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-05-05 12:50 . 2011-07-09 10:52 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-03-31 04:39 . 2012-05-12 10:28 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-03-31 04:39 . 2012-05-12 10:28 3913072 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-03-31 02:36 . 2012-05-12 10:28 2343424 ----a-w- c:\windows\system32\win32k.sys 2012-03-30 10:23 . 2012-05-12 10:29 1291632 ----a-w- c:\windows\system32\drivers\tcpip.sys 2012-03-20 18:44 . 2010-10-24 20:25 74112 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys 2012-03-20 18:44 . 2010-03-25 19:30 171064 ----a-w- c:\windows\system32\drivers\MpFilter.sys 2012-03-17 07:27 . 2012-05-12 10:28 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys 2004-10-21 13:10 . 2010-11-04 14:01 952320 ----a-w- c:\program files\kip.exe 1997-03-25 04:02 . 2010-11-04 14:01 303104 ----a-w- c:\program files\cw3230.dll 1997-03-25 04:02 . 2010-11-04 14:01 92680 ----a-w- c:\program files\bds52.dll 1997-03-25 04:02 . 2010-11-04 14:01 82976 ----a-w- c:\program files\bds52f.dll 1997-03-25 04:02 . 2010-11-04 14:01 229888 ----a-w- c:\program files\bc520rtl.dll 1997-03-07 17:00 . 2010-11-04 14:01 36352 ----a-w- c:\program files\_ISREG32.DLL 1996-08-08 04:01 . 2010-11-04 14:01 829984 ----a-w- c:\program files\owl501f.dll 1996-08-08 04:01 . 2010-11-04 14:01 77856 ----a-w- c:\program files\bds501f.dll 1996-08-08 04:01 . 2010-11-04 14:01 229376 ----a-w- c:\program files\cw3220.dll 1996-08-08 04:01 . 2010-11-04 14:01 227840 ----a-w- c:\program files\bc500rtl.dll 1996-08-08 03:01 . 2010-11-04 14:01 1093136 ----a-w- c:\program files\owl501.dll 1996-08-08 03:01 . 2010-11-04 14:01 92132 ----a-w- c:\program files\bds501.dll 1995-08-29 02:52 . 2010-11-04 14:01 60758 ----a-w- c:\program files\BIDS45.DLL 1995-08-29 02:52 . 2010-11-04 14:01 49152 ----a-w- c:\program files\BIDS45F.DLL 1995-08-29 02:52 . 2010-11-04 14:01 176128 ----a-w- c:\program files\CW3215.DLL 1995-08-29 02:52 . 2010-11-04 14:01 220672 ----a-w- c:\program files\BC450RTL.DLL 1995-02-28 09:16 . 2010-11-04 14:01 211488 ----a-w- c:\program files\BWCC32.DLL 1995-02-28 09:14 . 2010-11-04 14:01 164928 ----a-w- c:\program files\BWCC.DLL . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Software Suite"="c:\program files\Packard Bell\Software Suite\PBSoftSuite.exe" [2009-10-01 3144736] "Packard Bell Software Suite"="c:\program files\Packard Bell\Software Suite\PBSoftSuite.exe" [2009-10-01 3144736] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-09-19 39408] "NokiaSuite.exe"="c:\program files\Nokia\Nokia Suite\NokiaSuite.exe" [2012-05-16 1084840] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 61440] "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 56080] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 4.0\apdproxy.exe" [2005-09-15 57344] "CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 689488] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-17 1848648] "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-03-06 421736] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 931200] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2010-9-7 692224] Sitecom Wireless Utility.lnk - c:\program files\Sitecom\Common\RaUI.exe [2010-9-3 1773568] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 136176] R2 KMService;KMService;c:\windows\system32\srvany.exe [2010-09-06 8192] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 257696] R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 136176] R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 74112] R3 NisSrv;Microsoft Netwerkinspectie;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 214952] R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2012-01-09 137600] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-03 1343400] S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-09-23 64288] S2 PowerSave;PowerSave Service;c:\program files\Packard Bell\Software Suite\PowerSave\PSPBSSS.exe [2009-04-06 1002016] S3 AVerA706;AVerMedia A706 BDA Service;c:\windows\system32\DRIVERS\AVerA706.sys [2009-06-10 1169920] S3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2009-04-28 724992] S3 ULI526X;ULi M526X 10/100 Ethernet Controller Driver;c:\windows\system32\DRIVERS\ULILAN32.SYS [2006-06-30 30720] . . Inhoud van de 'Gedeelde Taken' map . 2012-06-11 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-18 12:50] . 2012-06-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 14:24] . 2012-06-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 14:24] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.nl/ uInternet Settings,ProxyOverride = *.local IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.254 . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . --------------------- DLLs Geladen Onder Lopende Processen --------------------- . - - - - - - - > 'Explorer.exe'(4760) c:\program files\Logitech\SetPoint\lgscroll.dll . Voltooingstijd: 2012-06-11 13:40:49 ComboFix-quarantined-files.txt 2012-06-11 11:40 ComboFix2.txt 2012-06-11 09:39 ComboFix3.txt 2012-06-10 13:30 ComboFix4.txt 2012-06-09 20:32 . Pre-Run: 102.558.711.808 bytes beschikbaar Post-Run: 102.274.928.640 bytes beschikbaar . - - End Of File - - 7A199F696814D5812E20BAA7C6CCD0AE

Beste mensen Onderstaand het gevraagde logje vanCombofix. Ik wacht jullie verdere acties met enige spanning af. Ik kan nog steeds geen backups maken via het windows-programma en Ad Aware staat ook nog op mijn pc. Groeten, Piet Jansen ComboFix 12-06-09.02 - Piet 09-06-2012 21:59:34.1.1 - x86 Microsoft Windows 7 Professional 6.1.7601.1.1252.31.1043.18.959.299 [GMT 2:00] Gestart vanuit: c:\users\Piet\Desktop\ComboFix.exe AV: Lavasoft Ad-Watch Live! Antivirus *Disabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116} AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6} SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB} SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Piet\AppData\Roaming\Ecfev c:\users\Piet\AppData\Roaming\Ecfev\giyx.ywp c:\users\Piet\PDFCreator-1_0_2_setup.exe c:\windows\system32\smtp.ocx . . (((((((((((((((((((( Bestanden Gemaakt van 2012-05-09 to 2012-06-09 )))))))))))))))))))))))))))))) . . 2012-06-09 20:20 . 2012-06-09 20:20 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-06-08 20:40 . 2012-06-08 20:40 -------- d-----w- c:\program files\Common Files\Nokia 2012-06-08 20:39 . 2012-04-22 11:51 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2012-06-08 20:38 . 2012-06-08 20:38 -------- d-----w- c:\program files\PC Connectivity Solution 2012-06-08 09:37 . 2012-05-08 16:40 6737808 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CC43038D-8E83-4C27-8922-C93CB29851AA}\mpengine.dll 2012-06-07 13:16 . 2012-06-07 13:16 -------- d-----w- c:\users\Piet\AppData\Roaming\Malwarebytes 2012-06-07 13:16 . 2012-06-07 13:16 -------- d-----w- c:\programdata\Malwarebytes 2012-06-07 13:16 . 2012-06-07 13:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-06-07 13:16 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-06-06 15:14 . 2012-05-08 16:40 6737808 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2012-06-02 11:52 . 2012-06-02 11:52 388096 ----a-r- c:\users\Piet\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-06-02 11:52 . 2012-06-02 11:52 -------- d-----w- c:\program files\Trend Micro 2012-05-31 17:08 . 2012-06-07 13:37 -------- d-----w- c:\users\Piet\AppData\Roaming\Inki 2012-05-31 17:08 . 2012-06-07 09:43 -------- d-----w- c:\users\Piet\AppData\Roaming\Feok 2012-05-31 11:53 . 2012-05-31 11:53 -------- d-----w- c:\users\Piet\AppData\Local\adawarebp 2012-05-30 10:49 . 2012-05-31 14:19 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection 2012-05-30 10:47 . 2012-05-31 11:56 -------- d-----w- c:\users\Piet\AppData\Roaming\Ad-Aware Antivirus 2012-05-17 18:31 . 2012-05-17 18:31 -------- d-----w- c:\users\Piet\AppData\Local\NokiaAccount 2012-05-17 17:50 . 2012-06-08 22:32 -------- d-----w- c:\users\Piet\AppData\Roaming\Nokia Suite 2012-05-17 17:50 . 2012-06-08 22:32 -------- d-----w- c:\users\Piet\AppData\Roaming\Nokia 2012-05-16 13:07 . 2012-05-16 13:07 -------- d-----w- c:\programdata\PC Suite 2012-05-16 13:07 . 2012-05-17 17:43 -------- d-----w- c:\users\Piet\AppData\Roaming\PC Suite 2012-05-16 13:04 . 2012-06-08 20:42 -------- d-----w- c:\programdata\Nokia 2012-05-16 13:03 . 2012-05-16 13:03 -------- d-----w- c:\program files\DIFX 2012-05-16 13:02 . 2012-01-09 15:28 75264 ----a-w- c:\windows\system32\nmwcdcls.dll 2012-05-16 12:59 . 2012-06-08 20:40 -------- d-----w- c:\program files\Nokia 2012-05-12 10:29 . 2012-03-30 10:23 1291632 ----a-w- c:\windows\system32\drivers\tcpip.sys 2012-05-12 10:29 . 2012-03-31 04:29 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll 2012-05-12 10:29 . 2012-03-31 04:30 1221632 ----a-w- c:\program files\Windows Journal\NBDoc.DLL 2012-05-12 10:29 . 2012-03-31 04:29 989184 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll 2012-05-12 10:29 . 2012-03-31 04:29 969216 ----a-w- c:\program files\Windows Journal\JNWDRV.dll 2012-05-12 10:28 . 2012-03-31 04:39 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-05-12 10:28 . 2012-03-31 04:39 3913072 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-05-12 10:28 . 2012-03-31 02:36 2343424 ----a-w- c:\windows\system32\win32k.sys 2012-05-12 10:28 . 2012-03-17 07:27 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys 2012-05-12 10:28 . 2012-03-03 05:31 1077248 ----a-w- c:\windows\system32\DWrite.dll . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-05-05 12:50 . 2012-04-18 10:15 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-05-05 12:50 . 2011-07-09 10:52 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-03-20 18:44 . 2010-10-24 20:25 74112 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys 2012-03-20 18:44 . 2010-03-25 19:30 171064 ----a-w- c:\windows\system32\drivers\MpFilter.sys 2004-10-21 13:10 . 2010-11-04 14:01 952320 ----a-w- c:\program files\kip.exe 1997-03-25 04:02 . 2010-11-04 14:01 303104 ----a-w- c:\program files\cw3230.dll 1997-03-25 04:02 . 2010-11-04 14:01 92680 ----a-w- c:\program files\bds52.dll 1997-03-25 04:02 . 2010-11-04 14:01 82976 ----a-w- c:\program files\bds52f.dll 1997-03-25 04:02 . 2010-11-04 14:01 229888 ----a-w- c:\program files\bc520rtl.dll 1997-03-07 17:00 . 2010-11-04 14:01 36352 ----a-w- c:\program files\_ISREG32.DLL 1996-08-08 04:01 . 2010-11-04 14:01 829984 ----a-w- c:\program files\owl501f.dll 1996-08-08 04:01 . 2010-11-04 14:01 77856 ----a-w- c:\program files\bds501f.dll 1996-08-08 04:01 . 2010-11-04 14:01 229376 ----a-w- c:\program files\cw3220.dll 1996-08-08 04:01 . 2010-11-04 14:01 227840 ----a-w- c:\program files\bc500rtl.dll 1996-08-08 03:01 . 2010-11-04 14:01 1093136 ----a-w- c:\program files\owl501.dll 1996-08-08 03:01 . 2010-11-04 14:01 92132 ----a-w- c:\program files\bds501.dll 1995-08-29 02:52 . 2010-11-04 14:01 60758 ----a-w- c:\program files\BIDS45.DLL 1995-08-29 02:52 . 2010-11-04 14:01 49152 ----a-w- c:\program files\BIDS45F.DLL 1995-08-29 02:52 . 2010-11-04 14:01 176128 ----a-w- c:\program files\CW3215.DLL 1995-08-29 02:52 . 2010-11-04 14:01 220672 ----a-w- c:\program files\BC450RTL.DLL 1995-02-28 09:16 . 2010-11-04 14:01 211488 ----a-w- c:\program files\BWCC32.DLL 1995-02-28 09:14 . 2010-11-04 14:01 164928 ----a-w- c:\program files\BWCC.DLL . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Software Suite"="c:\program files\Packard Bell\Software Suite\PBSoftSuite.exe" [2009-10-01 3144736] "Packard Bell Software Suite"="c:\program files\Packard Bell\Software Suite\PBSoftSuite.exe" [2009-10-01 3144736] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-09-19 39408] "NokiaSuite.exe"="c:\program files\Nokia\Nokia Suite\NokiaSuite.exe" [2012-05-16 1084840] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 61440] "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 56080] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 4.0\apdproxy.exe" [2005-09-15 57344] "CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 689488] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-17 1848648] "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-03-06 421736] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 931200] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2010-9-7 692224] Sitecom Wireless Utility.lnk - c:\program files\Sitecom\Common\RaUI.exe [2010-9-3 1773568] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 136176] R2 KMService;KMService;c:\windows\system32\srvany.exe [2010-09-06 8192] R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2011-09-02 2152152] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 257696] R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 136176] R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [2011-02-04 15232] R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 74112] R3 NisSrv;Microsoft Netwerkinspectie;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 214952] R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2012-01-09 137600] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-03 1343400] S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-09-23 64288] S2 PowerSave;PowerSave Service;c:\program files\Packard Bell\Software Suite\PowerSave\PSPBSSS.exe [2009-04-06 1002016] S3 AVerA706;AVerMedia A706 BDA Service;c:\windows\system32\DRIVERS\AVerA706.sys [2009-06-10 1169920] S3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2009-04-28 724992] S3 ULI526X;ULi M526X 10/100 Ethernet Controller Driver;c:\windows\system32\DRIVERS\ULILAN32.SYS [2006-06-30 30720] . . Inhoud van de 'Gedeelde Taken' map . 2012-06-09 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-18 12:50] . 2012-06-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 14:24] . 2012-06-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 14:24] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.nl/ uInternet Settings,ProxyOverride = *.local IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.254 . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2012-06-09 22:32:19 ComboFix-quarantined-files.txt 2012-06-09 20:32 . Pre-Run: 103.973.883.904 bytes beschikbaar Post-Run: 104.685.584.384 bytes beschikbaar . - - End Of File - - B8DA9B1C3E7D40DC0033D3702803F53B

Hieronder staat een bestand maar of dat het logje is van Combofix weet ik niet. Ik kon in eerste instantie het logje niet vinden. Ik heb de scan uitgevoerd als Administrateur en kreeg toen wat hieronder staat. Als onderstaand logje het niet is, dan hoor ik het wel. Met vriendelijke groet, Piet Jansen ComboFix 12-06-09.02 - Piet 09-06-2012 21:59:34.1.1 - x86 Microsoft Windows 7 Professional 6.1.7601.1.1252.31.1043.18.959.299 [GMT 2:00] Gestart vanuit: c:\users\Piet\Desktop\ComboFix.exe AV: Lavasoft Ad-Watch Live! Antivirus *Disabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116} AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6} SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB} SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Piet\AppData\Roaming\Ecfev c:\users\Piet\AppData\Roaming\Ecfev\giyx.ywp c:\users\Piet\PDFCreator-1_0_2_setup.exe c:\windows\system32\smtp.ocx . . (((((((((((((((((((( Bestanden Gemaakt van 2012-05-09 to 2012-06-09 )))))))))))))))))))))))))))))) . . 2012-06-09 20:20 . 2012-06-09 20:20 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-06-08 20:40 . 2012-06-08 20:40 -------- d-----w- c:\program files\Common Files\Nokia 2012-06-08 20:39 . 2012-04-22 11:51 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2012-06-08 20:38 . 2012-06-08 20:38 -------- d-----w- c:\program files\PC Connectivity Solution 2012-06-08 09:37 . 2012-05-08 16:40 6737808 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CC43038D-8E83-4C27-8922-C93CB29851AA}\mpengine.dll 2012-06-07 13:16 . 2012-06-07 13:16 -------- d-----w- c:\users\Piet\AppData\Roaming\Malwarebytes 2012-06-07 13:16 . 2012-06-07 13:16 -------- d-----w- c:\programdata\Malwarebytes 2012-06-07 13:16 . 2012-06-07 13:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-06-07 13:16 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-06-06 15:14 . 2012-05-08 16:40 6737808 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2012-06-02 11:52 . 2012-06-02 11:52 388096 ----a-r- c:\users\Piet\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-06-02 11:52 . 2012-06-02 11:52 -------- d-----w- c:\program files\Trend Micro 2012-05-31 17:08 . 2012-06-07 13:37 -------- d-----w- c:\users\Piet\AppData\Roaming\Inki 2012-05-31 17:08 . 2012-06-07 09:43 -------- d-----w- c:\users\Piet\AppData\Roaming\Feok 2012-05-31 11:53 . 2012-05-31 11:53 -------- d-----w- c:\users\Piet\AppData\Local\adawarebp 2012-05-30 10:49 . 2012-05-31 14:19 -------- d-----w- c:\programdata\Ad-Aware Browsing Protection 2012-05-30 10:47 . 2012-05-31 11:56 -------- d-----w- c:\users\Piet\AppData\Roaming\Ad-Aware Antivirus 2012-05-17 18:31 . 2012-05-17 18:31 -------- d-----w- c:\users\Piet\AppData\Local\NokiaAccount 2012-05-17 17:50 . 2012-06-08 22:32 -------- d-----w- c:\users\Piet\AppData\Roaming\Nokia Suite 2012-05-17 17:50 . 2012-06-08 22:32 -------- d-----w- c:\users\Piet\AppData\Roaming\Nokia 2012-05-16 13:07 . 2012-05-16 13:07 -------- d-----w- c:\programdata\PC Suite 2012-05-16 13:07 . 2012-05-17 17:43 -------- d-----w- c:\users\Piet\AppData\Roaming\PC Suite 2012-05-16 13:04 . 2012-06-08 20:42 -------- d-----w- c:\programdata\Nokia 2012-05-16 13:03 . 2012-05-16 13:03 -------- d-----w- c:\program files\DIFX 2012-05-16 13:02 . 2012-01-09 15:28 75264 ----a-w- c:\windows\system32\nmwcdcls.dll 2012-05-16 12:59 . 2012-06-08 20:40 -------- d-----w- c:\program files\Nokia 2012-05-12 10:29 . 2012-03-30 10:23 1291632 ----a-w- c:\windows\system32\drivers\tcpip.sys 2012-05-12 10:29 . 2012-03-31 04:29 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll 2012-05-12 10:29 . 2012-03-31 04:30 1221632 ----a-w- c:\program files\Windows Journal\NBDoc.DLL 2012-05-12 10:29 . 2012-03-31 04:29 989184 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll 2012-05-12 10:29 . 2012-03-31 04:29 969216 ----a-w- c:\program files\Windows Journal\JNWDRV.dll 2012-05-12 10:28 . 2012-03-31 04:39 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-05-12 10:28 . 2012-03-31 04:39 3913072 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-05-12 10:28 . 2012-03-31 02:36 2343424 ----a-w- c:\windows\system32\win32k.sys 2012-05-12 10:28 . 2012-03-17 07:27 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys 2012-05-12 10:28 . 2012-03-03 05:31 1077248 ----a-w- c:\windows\system32\DWrite.dll . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-05-05 12:50 . 2012-04-18 10:15 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-05-05 12:50 . 2011-07-09 10:52 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-03-20 18:44 . 2010-10-24 20:25 74112 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys 2012-03-20 18:44 . 2010-03-25 19:30 171064 ----a-w- c:\windows\system32\drivers\MpFilter.sys 2004-10-21 13:10 . 2010-11-04 14:01 952320 ----a-w- c:\program files\kip.exe 1997-03-25 04:02 . 2010-11-04 14:01 303104 ----a-w- c:\program files\cw3230.dll 1997-03-25 04:02 . 2010-11-04 14:01 92680 ----a-w- c:\program files\bds52.dll 1997-03-25 04:02 . 2010-11-04 14:01 82976 ----a-w- c:\program files\bds52f.dll 1997-03-25 04:02 . 2010-11-04 14:01 229888 ----a-w- c:\program files\bc520rtl.dll 1997-03-07 17:00 . 2010-11-04 14:01 36352 ----a-w- c:\program files\_ISREG32.DLL 1996-08-08 04:01 . 2010-11-04 14:01 829984 ----a-w- c:\program files\owl501f.dll 1996-08-08 04:01 . 2010-11-04 14:01 77856 ----a-w- c:\program files\bds501f.dll 1996-08-08 04:01 . 2010-11-04 14:01 229376 ----a-w- c:\program files\cw3220.dll 1996-08-08 04:01 . 2010-11-04 14:01 227840 ----a-w- c:\program files\bc500rtl.dll 1996-08-08 03:01 . 2010-11-04 14:01 1093136 ----a-w- c:\program files\owl501.dll 1996-08-08 03:01 . 2010-11-04 14:01 92132 ----a-w- c:\program files\bds501.dll 1995-08-29 02:52 . 2010-11-04 14:01 60758 ----a-w- c:\program files\BIDS45.DLL 1995-08-29 02:52 . 2010-11-04 14:01 49152 ----a-w- c:\program files\BIDS45F.DLL 1995-08-29 02:52 . 2010-11-04 14:01 176128 ----a-w- c:\program files\CW3215.DLL 1995-08-29 02:52 . 2010-11-04 14:01 220672 ----a-w- c:\program files\BC450RTL.DLL 1995-02-28 09:16 . 2010-11-04 14:01 211488 ----a-w- c:\program files\BWCC32.DLL 1995-02-28 09:14 . 2010-11-04 14:01 164928 ----a-w- c:\program files\BWCC.DLL . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Software Suite"="c:\program files\Packard Bell\Software Suite\PBSoftSuite.exe" [2009-10-01 3144736] "Packard Bell Software Suite"="c:\program files\Packard Bell\Software Suite\PBSoftSuite.exe" [2009-10-01 3144736] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-09-19 39408] "NokiaSuite.exe"="c:\program files\Nokia\Nokia Suite\NokiaSuite.exe" [2012-05-16 1084840] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 61440] "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-04-11 56080] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 4.0\apdproxy.exe" [2005-09-15 57344] "CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 689488] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-17 1848648] "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-03-06 421736] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 931200] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2010-9-7 692224] Sitecom Wireless Utility.lnk - c:\program files\Sitecom\Common\RaUI.exe [2010-9-3 1773568] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 136176] R2 KMService;KMService;c:\windows\system32\srvany.exe [2010-09-06 8192] R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2011-09-02 2152152] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 257696] R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 136176] R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [2011-02-04 15232] R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 74112] R3 NisSrv;Microsoft Netwerkinspectie;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 214952] R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2012-01-09 137600] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-03 1343400] S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-09-23 64288] S2 PowerSave;PowerSave Service;c:\program files\Packard Bell\Software Suite\PowerSave\PSPBSSS.exe [2009-04-06 1002016] S3 AVerA706;AVerMedia A706 BDA Service;c:\windows\system32\DRIVERS\AVerA706.sys [2009-06-10 1169920] S3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2009-04-28 724992] S3 ULI526X;ULi M526X 10/100 Ethernet Controller Driver;c:\windows\system32\DRIVERS\ULILAN32.SYS [2006-06-30 30720] . . Inhoud van de 'Gedeelde Taken' map . 2012-06-09 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-18 12:50] . 2012-06-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 14:24] . 2012-06-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 14:24] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.nl/ uInternet Settings,ProxyOverride = *.local IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.254 . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2012-06-09 22:32:19 ComboFix-quarantined-files.txt 2012-06-09 20:32 . Pre-Run: 103.973.883.904 bytes beschikbaar Post-Run: 104.685.584.384 bytes beschikbaar . - - End Of File - - B8DA9B1C3E7D40DC0033D3702803F53B

Beste mensen, Na het 2e bericht uwerzijds heb ik gedaan wat u mij gevraagd hebt te doen en de logjes heb ik aan u gestuurd. Maar ik heb helaas nog geen reactie gehad. Daarom mail ik u de logjes nog een keer voor het geval er de eerste keer iets is misgegaan. De computer heeft ook nog steeds kuren. Het bestand mia.lib ontbreekt nog steeds en ik kan daardoor Ad Aware nog steeds niet verwijderen. Hier volgen de logjes. Ik hoop dat u er iets mee kan. Met vriendelike groet, Piet Jansen Malwarebytes Anti-Malware 1.61.0.1400 www.malwarebytes.org Databaseversie: v2012.06.07.04 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 9.0.8112.16421 Piet :: PIET-PC [administrator] 7-6-2012 15:18:24 mbam-log-2012-06-07 (15-18-24).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 206722 Verstreken tijd: 18 minuut/minuten, 51 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerwaarden gedetecteerd: 1 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Oriwyb (Trojan.Agent) -> Data: C:\Users\Piet\AppData\Roaming\Inki\yzdyg.exe -> Succesvol in quarantaine geplaatst en verwijderd. Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Bestanden gedetecteerd: 6 C:\Users\Piet\AppData\Roaming\Inki\yzdyg.exe (Trojan.Agent) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ctoasgl.dll (Spyware.OnlineGames) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\OWL252.DLL (Spyware.OnlineGames) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\OWL252F.DLL (Spyware.OnlineGames) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\owl52.dll (Spyware.OnlineGames) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\owl52f.dll (Spyware.OnlineGames) -> Succesvol in quarantaine geplaatst en verwijderd. (einde) Hier volgt het logje van HijachThis na de scan met MBAM en verwijdering van geselecteerde bestanden: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:48:21, on 7-6-2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\SMax4.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Packard Bell\Software Suite\PBSoftSuite.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\Sitecom\Common\RaUI.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE C:\Program Files\Packard Bell\Software Suite\pbDevDetect.exe C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe C:\Windows\system32\SearchFilterHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer wordt aangeboden door MSN and Bing R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: DownloadGuardBHO - {20C1A7F0-528E-444F-BAC5-5804A61CCA7F} - C:\Program Files\Lavasoft\Download Guard for Internet Explorer\DownloadGuardBHO.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe" O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [soundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey O4 - HKCU\..\Run: [software Suite] "C:\Program Files\Packard Bell\Software Suite\PBSoftSuite.exe" /RUN O4 - HKCU\..\Run: [Packard Bell Software Suite] "C:\Program Files\Packard Bell\Software Suite\PBSoftSuite.exe" /run O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O4 - Global Startup: Sitecom Wireless Utility.lnk = C:\Program Files\Sitecom\Common\RaUI.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: PowerSave Service (PowerSave) - Packard Bell Services - C:\Program Files\Packard Bell\Software Suite\PowerSave\PSPBSSS.exe O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files\Sitecom\Common\RegistryWriter.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 8349 bytes

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:06:06, on 3-6-2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\SMax4.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Packard Bell\Software Suite\PBSoftSuite.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\Sitecom\Common\RaUI.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE C:\Windows\system32\taskhost.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Packard Bell\Software Suite\pbDevDetect.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe C:\Windows\system32\Macromed\Flash\FlashUtil32_11_2_202_235_ActiveX.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer wordt aangeboden door MSN and Bing R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe" O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [soundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey O4 - HKCU\..\Run: [software Suite] "C:\Program Files\Packard Bell\Software Suite\PBSoftSuite.exe" /RUN O4 - HKCU\..\Run: [Packard Bell Software Suite] "C:\Program Files\Packard Bell\Software Suite\PBSoftSuite.exe" /run O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray O4 - HKCU\..\Run: [Oriwyb] C:\Users\Piet\AppData\Roaming\Inki\yzdyg.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O4 - Global Startup: Sitecom Wireless Utility.lnk = C:\Program Files\Sitecom\Common\RaUI.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: PowerSave Service (PowerSave) - Packard Bell Services - C:\Program Files\Packard Bell\Software Suite\PowerSave\PSPBSSS.exe O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files\Sitecom\Common\RegistryWriter.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 8420 bytes

Beste medewerkers, Sinds kort krijg ik de mededeling dat de backup die ik via het configuratiescherm (Windows 7) probeer te maken, niet gelukt is. Ook met AdAware Free heb ik sinds kort problemen. Hangen die samen? Als ik AdAware probeer op te starten, krijg ik de mededeling dat het bestand mia.lib ontbreekt. Kan ik dat ergens vandaan halen en downloaden? Ik probeerde AdAware te verwijderen, dat lukt ook niet. Via Lavasoft geprobeerd AdAwre te updaten, ook dat werkt niet? Ik heb een volledige scan uitgevoerd met Microsoft Security Essentials, duurde 4,5 uur. Kuntu mij adviseren? Met vriendelijke groeten, pietjans1